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"Not on ly have we been "beaten in the decisive battles of this war, 
but also we lost the communications war. We felt foolishly secure and 



failed to take adequate measures to protect our own communications on one 
hand, while on the other hand, we failed to succeed in breaking into the 

enemy’s traffic. This is undoubtedly one of the major reasons for our 

* 

losing battles and in turn one of the major contributing factors to our 



losing the war. We failed in communications." 












•Books recently -published ‘iDTJapanHay former Japanese 



naval 



jjjxjl. 

rffic 



officers come out quite openly with statements attributing their defeat to poor 



COMSEC on their par t^ and excellent American COMINT and COMSEC. For example, 
there is Captain Fuchida’s book entitled Midway: The Battle that Doomed Japan, 



Chapter VIII, p. 131s 



"If Admiral Yamamoto and his staff were vaguely disturbed by 



persistent bad weather and by lack of information concerning the doings 



of the enemy, they would have been truly dismayed had they known the 



actual enemy situation. Post-war American accounts make it clear that 



the United States Pacific Fleet knew of the Japanese plan to invade Midway 



even before our forces had started from home waters. As a result of some 
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if -- . 

amazing achievements of American intelligence, the enemy had succeeded 

i • ■ ; 

in br eak ing the principal code then in use "by the Japanese Navy. In this 
way the enemy was able to learn of our intentions almost as quickly as 
we had determined them ourselves." 

(Here as an aside what Wenger told as to disbelief in decrypts.) 

Lest you infer that our side didn’t meet with any CQMSEC accidents, let me 

i 

) say that we had plenty of them. These were not attributable, however, to serious 

i 

i 

, weaknesses in our COMSEC devices, machines and procedures, but principally to 

! 

i 

i 

| human failure to follow the rules implicitly or to weaknesses in the COMSEC 

i 

| devices, machines and procedures of some of our Allies. Take for instance the 

I 

I heavy losses that the United States Army Air Corps sustained In their air strikes 
. on the Ploesti oil fields in southeastern Europe. We lost several hundred big 
bombers within a relatively short time because of weaknesses in Russian communi- 

i 

\ 

cations which let the German fighter commands know exactly when our bombers 

I 

. left and where they were going. When found out what the trouble was, it was 

J 

, too late. This incident leads me to say that when you fight a war with allies 
their COMSEC weaknesses are bound to affect the security of your own forces; 

; something must be done to eliminate those weaknesses, even at the risk of 

* 

? 

' jeopardizing other important things. For instance, you may have to provide 

> _ 

‘them with some of your own cryptomaterial, in which case you lose control of the 
/ continued secrecy of that material. , . _ 

It is hardly necessary to tell you that with the advances made in the 
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what 



we call Cipher Device type M-9U^ Now, when Major Ma^bojJrgm 



,e decided to 



/ 



go ahead with this device, Mrs. Friedman and I were hack at Riverbank, after 



‘ i 



■ I had returned from the AEF. We didn't think the device was very secure and 
\ said so, whereupon Mauboj&gne issued a challenge, which was accepted. He sent 
25 messages. We started in with our crew to try to solve the messages by 
lining them all up and trying to guess words in them. It was no-go. We spent 



1 



a lot of time trying to solve those messages --and so did the crew of crypt- 



^ ( analysts in G-2. Ten years later I found the plain text of the set of 25 

1 
1 

' challenge messages amongst some old papers in the Office of the Chief Signal 

1 

. Officer and then I knew why neither we nor G-2 solved them — look at them! And 
>we were expecting military text! In defense of Mauborgne I'll say that it was 



i 



not he who cooked those test messages up for the challenge— it was one of his 

4 

% 

* V 

J assistants who thought "he'd put one over on us, which he did. 

< -- , i 



\ I 









) 



When after 



some six or so 

/ months nobody had solved his challenge messages Mauborgne went ahead and got 



\ 



\ the thing out, and 



were 



thousands of then/ made. They werer'used by the Army, the Navy, the Coast 



Guard, and the Treasury. I3ere*s a picture of the thingTJ A couple of years after 



the M-S& was put into service a friend showed me a 



write-up of something he'd 



come across more or less accidentally in the Library of Congress, among 
sBpttBdHEs&s the papers of Thomas Jefferson. Mm&annBi Jefferson was the first 

to invent the cipher cylinder principle, and he anticipated the Frenchman, 



Bazeries, by a century. Here is the first page of his description of his 



11 - 



REF ID : A63404 



50. device, which he called "The Wheel Cypher." Here is the second page. You see 

50. I 

his calculations, giving you at the bottom the number of permutations that his 



particular device affords --a whale of a large number because Jefferson proposed 



a set of 36 disks . 

In studying the degree of security provided by the M-<?4 both Army and Navy 



cryptologists soon came to the conclusion that security would be much increased 
by the use of v ariebl e—or changeable^ alphabets . Among other versions, I had 
one which used metal rings on which we could mount slips of paper and fasten 

A 

them; thus we could change the alphabets as often as was felt necessary. Navy 



tried other versions. That was the beginning of the various ssaasiant forms of 



strip cipher devices used by the Armed Forces, and later by the State Department 



and the Treasury Department. Here is a picture of the final Army type~Of 



5b.il strip cipher device. J You see the channels in which the alphabet strips were 



inserted according to the daily key, and according to the particular 



- \ . . 4 



I to which your command belonged. I mean by this that not all the traffic would 



' be in the same set-up of strips or even, used the same strips . The idea was to 



cut down the amount of interceptible traffic in the same key. The strip ciphers 



carried an enormous amount of traffic. 



Next we come to a machine called the Kryha, invented by a German, in about 
the year 1925- rThe Kryha was the last word in the way of mechanical crypto- 



graphs ( art*~the -time-y-and Mr. Kryha tried to interest various governments in 
his machine. I--think I should explain it for those who have never seen -It. 
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which was ever solved in that sort of a machine, and "by the way, I hope you 



will forgive me if I say that the methods I had to devise at that time for the 



{solution of rotor machines and rotors in cascade are practically the same today 
s_jtbe.y.JHB3?e-over -tb±rty-f±ve-years ago. Despite my solution we thought that 



L 



the Hebern principle was still a good one and Navy went ahead with Mr. Hebern 

HR- VO after he got out of prison. Here's a picture of the last machine built for the 

A 

Navy. Hebern wanted to get paid for it naturally, but there was just one hitch — 
the machine wouldn't work and when this was pointed out to him he said: "Show 

me where it says in the contract in has to work", and when they couldn't, he 
was paid off. The Navy then decided that they had had enough of Hebern and 

VI. rt 

went into research and development themselves^ -They-had a laboratory^ established 
in the Navy Yard, d^a, very able young -nailer, no* a Captain in the-Navy, 

“'■"-a, 

who did sane excellent developmental work. Years later the Hebern heirs brought 
suit in the United States Court of Claims against the United States for $50,000,000, 

JU s*V 
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"i jfc-«r~Got . --The case- has been- pending for ~a^tonber 1ST yea¥&'~8M the laSt I knew 
ofL-ii^-^ich^was--- about a month - or-tvn.ago , -a settlement was in prospect for- 
_ahout-$30,000. - That's quite a- discount. I might say that 






there was very little collaboration 



f between the Army and the Navy cryptologic organizations in those days before 



Pearl Harbor. Each Service had its own secrets — which was really too bad. 



but the situation was mended later, as we will have occasion to learn. 






low) I'm going to show you^a few slides of the Army developments in^crypto- 



machines. This, after the debacle I've told you about, was the first shot that 



Ho 



we in the Signal Intelligence Service in the Office of the Chief Signal Officer, 
in Washington had at developing a machine for the Army. It had a keyboard, a 

light -bank, 

/ 5 -rotors, and now an interesting feature — an external keying mechanism. 



I had come to the conclusion that internal control mechanisms for 
stepping rotors had a fundamental weakness T felt that you must not make the 
rotors depend upon themselves for the stepping, and I conceived the idea of 
having an external key, for example, a teletype tape, which would step along 



and control the stepping of the rotors in random fashion. These tapes were 



composed of a sequence of random characters so that the rotor stepping was 



quite erratic, and that was our first shot at it. I think the principle is 
still quite safe, especially if the tapes aren't overburdened in usage. This 

* **mafahwo rtgnpe 

i« ”7 is another view of the same machine — here is the tape transmitter, the rotors. 



the keyboard, an electromatic typewriter, etc. 



ladBmx igpaa ^al B tmgpxwaD 
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I think this was one 



We had boxes of about 100 key tapes 



from which you could make the selection for the day according to the keying 
document. 

P -^r/ 

Th^ fatal weakness, of course, was the^ production and distribution of th« 
tapes. , >--ghis-^was-quitfi-.a-headache -and - even when.we used-specially heavy paper for 

the-tapes ^fcbey would break after they had“gone through a number of times* 



fcfcOMQ 



lyp» »pr****gnf tfa„Jaad -aJarm-h -75 ' of*"tfaese ^BSmirac tured by a 
-concern in New Jersey that was not particularly gifted in the typewriter art. 
'The machines functioned all right but before even ten of them had been produced 
we had hit upon a new principle for the control of the rotor stepping. I tried 



my very best to get the Signal Corps to change the development right there and 



then, and shift to the new type of control. I was practically thrown out of the 



office of the chief of the division with the remark, "Go back to your den — 

If we Always- listened. 

you inventors are all alike. A new and better idea every day. *■ 

to you. we'd never get anything out." V& 

— * ■“ “*■ 1 — 11 So we put the idea on ice, that is, in 



\T<A secrecy. I will switch now to the Navy MARK I ECM, the electric cipher machine ^ 



designed, developed and built by the Navy without any help from Mr. Hebern. It 



held a new type of control mechanism for rotor stepping, based upon the use of 
wires 

Bowdei/ or flexible cables. They were tricky and gave rise to a lot of difficulty 
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t hat we *»«d to^m&lse an adaptor' for th^s v machine so that it could inter -communicate 

Ao tCjt 

with the British TYPEX^and the British had to' make an - r cdaptor for their machine 



to inter -communicate with the ECM-SIGABA . ^ It~was ~arwhtsriy" unneces Sary expense , 



I-tbink/'hut by the end of 1953 we were able to convince the authorities that 

•*“ i 

■» 

• » * « _ 

r ft *■ - % . 

it would be all right and finally the British were allowed to have our machines 

* 9 - 

until they could complete their developments and be on their own. I think ^faey 
Vvvcc' $ \>>Ova. )x> i&B. 

'at ill have^ some of our machines but they’re supposed to turn them back in due 

J course. I can explain the basic principle of the machine. Here are its 

essential elements: a set of five ciphering rotors here, and another set of 



five control rotors here, making a set of ten altogether. Since the rotors are 

! all interchangeable, there can be a great number of permutations from a primary 

5 

* 

I set of ten rotors. It’s greater than 101 because the rotors can be inserted 

| right-side up or upside down; in fact, the number is 20 x 18 x 16 ... x 2. And 

\ 

1 if you have a set of 20 from which you can select 10, as is now the case, the 

• 

1 

j 

J number becomes very much greater. Now there are four inputs in this row of 

1 

( 

control rotors and their output governs the stepping of the five cryptographic 
rotors in a very erratic manner . This set of five small rotors permutes the 



output of the control rotors, adding an additional valuable keying element. 

-vtifc ^ We know of no case of solution of this machine and system throughout the 

war, and it is still in service as a high-grade off-line machine. During its 

10 

use in World War II there was one possible compromise -and— -it raised quite a 

vA“ un»-'5 fbrw .a, 0»S. 

storm ^at-the-timev^The 28th Division -bivouacked for the night in a small city • 

CLuJt. fact-db-T — J-Cji. r acGSL KgJ, 

tjj&M /uurt JCjl 

Jr Ql«S.A $>$*■ \a ^O- — lci^ cl , 
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in France and the vehicle containing the cryptomaterial and the SIGABAs was 
stationed in front of the place where the Signal Officer and his entourage were 
quartered for the night. Unfortunately no guard was posted to safeguard the van. 

i 

In the morning that vehicle was missing. Warning messages were sent instantly 
\to Washington and there was a great to-do. The Army blockaded all the roads, the 

l 

i 

lidea being to make sure that the truck wasn't being carried off by some German 
| outfit, but nothing turned up. There was a possibility that the van had been 
stolen by Frenchmen purely for the vehicle, in which case its contents would be 
of no interest. to them. Surely they'd get rid of that hot goods at the first 
opportunity, which would be to dump them in the nearest river. The Engineer 
Carps diverted that river and sure enough all the cipher machines and the crypto- 



material had been dumped into the river. The episode was one which caused the 



dbj^. 






Signal Offlcer^to be tried by court martial* ao - were scverr alrTrfaher-. We had and 
still have very strict rules indeed about safeguarding this gadget, and in 
mentioning this point^I should say that we weren’t worried by the thought that 
our messages could be read if the Germans' would capture one. We were worried 
by the thought that they would learn how good it was and would copy it — thus 



cutting off our COMINT. I can hardly refrain from telling you one of the funny 



» 

things about our not giving the machine to the British when they needed it so 
desperately. I mentioned the strict rules about safeguarding it--who could see 
the thing, who could service it, and bo on, and we saw to it that these rules 
were strictly enforced. But there came a time in North Africa when all our 
maintenance men were knocked off and there was nobody to service the machines. 
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m 

However, a very skillful Br itish^Of f icer , an electrical engineer was pressed 
into service and he maintained our SIGABAs there for a while. I*m sure you 
won't be astonished to learn that aft r o r-Vfi- Day^ when he got back to London^ he 
built a machine based upon the ECM-SIGABA principle! 

A 

I want to show you next the cipher machine which was used very extensively 
by all the German Armed Forces in World War II. This was a modification of 
their commercial Enigma machine but an important modification, introduced 
when Hitler came into power, at which time the commercial model was withdrawn 
from the market. I think 

e 
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using circular key tapes of random characters. , 
cipher machine , / Thie-da-the- way dt-mB~'doae . ’Here is th© keyboard for 



. 



punching out the plain -text message; here is an ordinary t£ pe transmitter, 

which took the plain-text tape and put the signals on the telegraph line; 

\ 

but here there were two additional transmitters through whij:h key-tapes were 

I 

i 

passed. These were composed of random-punched characters, the tapes being 

l 

[ 

joined at their ends to form two circular tapes, and they were of different 

* 

diameters. To begin with the A.T. & T. started out with one tape 1,000 

/ 
f 

i characters in length and the other 999 > so you can see 'if the tapes start 

f 

/ 

at an initial point, they would not return to the original pair of starting 

/ 

/ 

points until the shorter tape had made 999 revolutions, the longer one 1,000, 

/ 

/ 

that is, the interaction of the two tapes produced a key that was 990, 



/ 

characters in length. So there were three tape transmitters interacting, one 
for the plain -text tape, two for the key tapes. Great faith was placed in 



this machine but it was not put into use until the war was over. By that time 
I had come back from France, rejoined the River bank Laboratories and accepted 
a challenge to solve this kind of cipher system. It’s too long a story to go 
into right now but as a result of the solution the Army dropped the project. 



I think it was in a way too bad,. and.X-suppose some ‘of the -responsibility -lies 



arumy shoulders , because when we had a need for teleprinter ciphering in the 

ti" 

early days of 194-2 we actually ^went -back -to this ting . The big trouble of 

* 

f 

these key tapes, and it is a 

course was the production and distribution of 

problem 

*M»^ggaiBBiyirft»iwii i anaae which is still with us.' Here's gin early model 
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75 % of a machine for making key tapes. We improved such machines very greatly in 
the next year or two, so that we could produce hundreds of thousands of good 
tapes in a hurry. Our modern key-tape manufacturing apparatus uses a key 
generator for producing electronically the random impulses for punching the 



tapes. 



Next I shew another commercial development for teleprinter ciphering, one 
"by the I. T. & T. Co., who employed Colonel Parker Hitt after he had retired 
from the Army in about 1925 . The machine presumably was to incorporate a 
very secure principle, since Colonel Hitt was well acquainted with cryptology. 






But I am sorry to tell you that it wasn't a secure' principle that he employed. 

i*-" 

’ \ ' 

A demonstration equipment was installed in the State Department and the Army 



f s 



cryptanalysts were asked to test its security. Some messages prepared by the 



I State Department's Chief of Communications were solved in a hurry. I had the 
unpleasant task of telling Colonel Hitt that I wasn't at liberty to tell him 

I what the trouble was. This was our fixed policy in the Office of the Chief 

’ 

Signal Officer, and I think it was an understandable one. If we undertook to 

i 

tell all inventors what the trouble is with their inventions we would never 
get anything else done but look into their successive modifications . We would 
thus bring them up-to-date in cryptanalysis, too, and this is certainly not 

i 

'.advisable as regards the run-of-mine or would-be inventors of crypto-apparatus. 



This is a rotor machine, the SIGCUM, which the Army developed in 19^2-43 



and used very successfully to encipher teletype communications. It uses not 






perforated tapes but rotors which step 












I 
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in an erratic fashion "but not as erratic as in the ECM-SIGABA. 



(3**^ WV 

. -fflae-SIOGlM 

A 






«nd its '-successors had weaknesses.; every once in a while , when we discovered 

new cryptanalytic techniques, 

we found that SIGCUM had weaknesses which could he 



exploited; whereupon 

» we would proceed to tighten up things by changes in the 

Vml CbG&JrvJt.'l OJ\A 

method of usage or the method of stepping the rotors, and so on. Here’s-- a 
$ iW. tUn. WX *jta- 

■picture- of Hihe-ent ire SIGCUM unit with -the -teletype -signal mixing- unit— the 
■>w(y\j3Ly <X*JW^ v*\t -w*^S-iSL /A*. K^~~- 5^0 VxCxO" • 

hig_set-her«-x»ffiost- of -which was unnecessary. -The mixing apparatus takes -the 



signals f rom here and mixes -t&em with -the. SIGCUM, then putting the enciphered 
signals-.- out -on -the line. 

Now we have to say a few words about certain "other "types of ciphering 

■ Uhit. 0L/*jL 

apparatus. For example, it is necessary to sand^weather 
mid nt-Tn*r types r>f maps important for successful military operations^ and so 
it was desirable to have a machine which would- encipher and decipher facsimile. 
The generic name we gave to machines for ciphering facsimile was cifax . Here 



™y g j situation maps. 



is one such machine that was developed by Army for the purpose, called SIGMEW. 

We also had need for machines ^that would* jjnpose security protection upon telephone 
conversations, machines with the generic name cl phony equipments; here's the 
first shot at it — a development by the Bell Telephone Laboratories, called 
SIGJIP. It was a gyp in a way — it gave you much more feeling of security than 



was warranted by the circumstances . Conversations enciphered by means of that 



thing could be read very readily and we all knew this but it was only an interim 
piece of equipment. The Telephone Company proceeded with its work, in collabora- 
tion with engineers from the Signal Intelligence Service and the Signal Corps, 
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and a very high-grade ciphony system which became known as SIGSALY was finally 
developed^ Each terminal cost over a million dollars and there were -a-total 



seven of them. 



3"ends oT'the 



'^c*t>«uit._weEe-kept in - synChrohy by means“of a very-very higE^'ade "r¥5SS‘d - 




oalaadas. ~ • ThS^SIGSALY turned out to be extremely useful. 



Now in addition to cifax and ciphony we tried to develop practical cipher 



machines for other purposes, such as recognition, identification, IFF, callsign 
machines, etc. This is a war-time callsign machine developed by the U.S. Navy. 

It was based upon an algebraic principle described in a paper in one of the American 






mathematical journals; it appealed to me but I could never get the Army to go 



| in for callsign changes in a big way. The Navy did, however, and this principle 
was incorporated in a call-sign ciphering machine for Navy communications. A 



good machine was developed and I think it is still in service. 



Sooner or later — and I think the sooner the better — we will have to have 



ciphering apparatus for protecting telemetering signals, television signals, 

to have 

homing beacons, etc . -iK anything in the way of a signal is going to have/means 

- v 

and mechanisms for security protection. 

The professional cryptologist is always amused by the almost invariable 

" ' ■ i 

reference by the layman to "the German code", " the Japanese code", " the U.S. 
code, etc. To give an idea aB to how fallacious such a notion is, I will say 
-said once before^ there are hundreds of systems in simultaneous use in the 
communication services of all large governments . 'f 1 **- w ' r ^ 



.t 






y. % 
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as long as possible in order to delay the enemy* s real attack on the traffic 
enciphered by the machines. But, of course, there’s the other reason I’ve 
already mentioned: to prevent a potential enemy from copying our machines and 



turning our own weapons against us , 



Now 



let’s see pictures of some of the new apparatus ^ </oWlcW •&*- 

For field use we now have in place of Converter M-209 a small off-line 



high security machine designated the ASSAM-?..’ It has a keyboard and prints 
the cipher text. For electric power it uses any 24- -volt source. This machine 
is now the work -horse for tactical cryptocommunications, and, by the way, 
several thousands of them have been issued to our NATO allies. 

Here’s a machine designated therKW-3^ It is an off-line teleprinter 



i - ■ — 

cipher machine but it has all the conveniences of an on-line machine and 
eliminates some of the weaknesses of the latter. The machine generates the 

i 

key as well as the indicators for messages. All the operator has to do is to 
type the address, punch a starting key on the machine, and then proceed to 
type off the plain text of the messages, whereupon a cipher tape is produced, 
which can be put on any teleprinter circuit for transmission. At the receiving 
center the operator puts the cipher tape into a reading head, the start button 
is pushed, the message sets up its indicator and key, and the tape produced is 



vdJc. jl>aCCr>vN^ 

the plain text of the original message. The KW-3 ie-sfeeflaaing the real work-horse 
of our Armed Forces high-command cryptocommunications . 
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vn^W yia>u*rt<,<L. $3*^7 ^ 

Next I show the KW-37, designed for Navy Fox or broadcast transmissions,^ a 

machine which embodies a teletype printer and uses an IBM card for keying 

— \ 

purposes. So far as the^communication center aboard' ship is concerned, the Jtuxdu » 
/' ' hiw-iwiL UOOvifc 

operators^den-M; even see the cipher— the messages a rriv e^ tl^re in plain language} 
^he ciphering is done elsewhere on the ship. This system is a synchronous one, 



meaning that both ends of the circuit axe constantly and automatically kept 
in step; also, and related to this fact is the fact that the system is such that 
the intercepting enemy can't tell when a message is being transmitted and when 



the circuit is idling, giving what we call "link security", a very important 



element in communication security. 
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In what I've just showed you'll notice the emphasis placed on telephone 
security devices and systems, and on automatic teleprinting systems. The days 
of hand -operated devices is over, and those of semi-automatic off-line cryptographic 
machines are drawing to a close. And, last to be mentioned, NSA crypto- 
engineers are doing development work in civision systems — enciphered television — 
which will doubtless come into use within a few years . 

But with all these modern improvements I don't think the day has yet 
dawned when it can be said that the human factors that make for crypto-insecurity 
have been altogether eliminated. Perhaps it's true that at the moment COMSEC 
technology can be said to be ahead of COMINT technology; but with ever-increasing 
speed of electronic analytic apparatus the gap can and perhaps will be closed, 
unless the COMSEC engineers keep pace with that apparatus. In short, it is the 
age-old battle between armor and armor -piercing projectiles. In the meantime, 
communicators must keep their guard up and enforce the rules supplied them for 



operating their crypto-equipments. In closing this period let me remind you 
of-that-intr oductory slogan;, -"Panlt JLearn your COMSEC rules by accident-.-* 1 ' 









^Cfcjrvue-A \o % tsfi. jliS* 

'VwO 

flJL, a ukJc 
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